mariadb vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-107385Highmariadb: MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES CVE-2026-107384Highmariadb: MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)CVE-2026-107383Highmariadb: MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters CVE-2026-107382Mediummariadb: MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS CVE-2026-55855Mediummariadb: MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets CVE-2026-55854Mediummariadb: MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials CVE-2026-55215Highmariadb: MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo